Merge "Add permission check to setAllowOnlyVpnForUids" into pi-dev

am: 269357aa0e Change-Id: If86e9905a38bf505b601bef6ae09c60fb76d4d4c
2018-03-08 15:52:38 +00:00
parent 850c657092 269357aa0e
commit a95ae52341
1 changed files with 2 additions and 0 deletions
--- a/services/core/java/com/android/server/NetworkManagementService.java
+++ b/services/core/java/com/android/server/NetworkManagementService.java
@@ -1789,6 +1789,8 @@ public class NetworkManagementService extends INetworkManagementService.Stub
    @Override
    public void setAllowOnlyVpnForUids(boolean add, UidRange[] uidRanges)
            throws ServiceSpecificException {
+        mContext.enforceCallingOrSelfPermission(NETWORK_STACK, TAG);
+
        try {
            mNetdService.networkRejectNonSecureVpn(add, uidRanges);
        } catch (ServiceSpecificException e) {